This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Xxs4ldV2enfWsLfgfxEllPDWnWo.roa File: Xxs4ldV2enfWsLfgfxEllPDWnWo.roa (raw, json) Hash identifier: 8Cn8Jb6BuKTBrGl7OMfhVUGxRn/9grjWQRc7jCMSinQ= Subject key identifier: 5F:1B:38:95:D5:76:7A:77:D6:B0:B7:E0:7F:11:25:94:F0:D6:9D:6A Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68 Certificate serial: 019B78346195E11CC3E03C1DAB4E9948B1FD Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Xxs4ldV2enfWsLfgfxEllPDWnWo.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39128 IP address blocks: 195.114.96.0/23 maxlen: 24 2001:67c:2974::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:61:95:e1:1c:c3:e0:3c:1d:ab:4e:99:48:b1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68 Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f1b3895d5767a77d6b0b7e07f112594f0d69d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:a5:ca:13:2f:6b:89:67:f3:49:59:68:ff: 6a:8c:84:83:2a:48:97:46:d0:4a:31:a1:1a:a7:48: 37:be:64:47:73:8d:ea:c3:ce:14:c7:59:c7:5f:49: c6:37:2d:1c:01:52:65:2c:c8:ad:02:f4:2d:91:c0: 25:db:ba:0f:26:f4:dd:09:50:81:b6:69:6f:64:54: 87:af:41:b1:03:c7:10:62:22:5f:b7:04:62:89:1d: ec:82:cf:21:e4:ce:82:0f:85:7f:0a:ea:2f:a9:b8: 24:22:1f:90:a8:b2:2b:f4:ab:36:ad:dd:7e:eb:42: 83:cb:ba:b7:31:52:7c:00:26:8e:7b:42:f8:dd:13: a1:44:71:11:cb:c7:2a:9a:95:ff:db:77:58:26:f3: 34:9c:68:9f:86:74:e3:1f:c2:12:39:9d:cf:86:1c: 37:e2:57:17:0f:f7:18:03:f4:d2:f1:80:75:de:13: 20:31:2c:12:af:52:2f:a1:e2:fe:9f:ca:97:6a:47: 19:cb:2d:98:c4:45:2a:b5:35:ae:56:bf:18:b1:4f: 4e:cc:24:35:05:a9:78:8c:63:4a:04:a8:86:1c:45: f1:72:2f:e6:62:5d:b3:2d:09:6a:a1:c7:90:93:18: 9e:29:39:e0:6e:7a:be:41:b7:f1:a3:be:ea:d3:1e: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:38:95:D5:76:7A:77:D6:B0:B7:E0:7F:11:25:94:F0:D6:9D:6A X509v3 Authority Key Identifier: keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Xxs4ldV2enfWsLfgfxEllPDWnWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.96.0/23 IPv6: 2001:67c:2974::/48 Signature Algorithm: sha256WithRSAEncryption 27:b8:63:26:bb:25:84:0c:23:86:46:fb:fa:9f:92:0e:00:a0: aa:9b:14:6c:8e:ec:22:e4:c4:36:3a:61:83:18:71:19:09:50: 42:71:38:7d:24:d1:f2:c3:89:a3:16:26:76:b2:f8:e6:f6:4e: 1b:e7:e1:e0:8e:be:5f:98:f4:f3:14:21:57:73:c1:8d:b6:bc: 3e:83:29:00:75:cf:30:7a:dc:53:a0:78:ea:37:52:b5:ca:75: a9:2a:42:40:7d:71:85:94:5d:b9:67:a8:a6:b5:b8:4c:f3:b6: 30:e3:0d:d2:e0:83:d6:b7:76:37:c0:be:63:54:4c:57:61:a9: 4e:eb:c7:9c:9d:62:46:7b:a5:fc:7d:e2:e7:e9:a1:b2:6b:52: c5:2f:ca:1c:bd:bc:af:23:05:a7:43:84:96:ff:dc:43:a8:3f: ea:a2:16:ba:37:e5:56:7b:24:c1:f6:3f:6a:a7:d7:af:7b:22: 17:2e:01:4c:2c:cb:41:1d:93:c1:85:3f:31:35:32:be:6e:22: c3:d4:95:cc:f4:1a:09:6e:e6:6c:d1:f5:e0:b2:35:8b:ab:83: 20:8d:66:50:66:20:10:af:da:4d:42:19:cc:de:1f:86:84:f2: 68:88:fe:55:26:b9:16:d1:b3:de:aa:b4:b4:34:8f:1d:a7:05: 47:dd:0e:b6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NGGV4RzD4Dwdq06ZSLH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNDZiZDAwZGFhNGRhOTJhMGMzNmZhY2RkOWNkNjk0OTFk OTZjNjgwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjFiMzg5NWQ1NzY3YTc3ZDZiMGI3ZTA3ZjExMjU5NGYwZDY5ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym+lyhMva4ln80lZaP9qjISDKkiX RtBKMaEap0g3vmRHc43qw84Ux1nHX0nGNy0cAVJlLMitAvQtkcAl27oPJvTdCVCB tmlvZFSHr0GxA8cQYiJftwRiiR3sgs8h5M6CD4V/CuovqbgkIh+QqLIr9Ks2rd1+ 60KDy7q3MVJ8ACaOe0L43ROhRHERy8cqmpX/23dYJvM0nGifhnTjH8ISOZ3Phhw3 4lcXD/cYA/TS8YB13hMgMSwSr1IvoeL+n8qXakcZyy2YxEUqtTWuVr8YsU9OzCQ1 Bal4jGNKBKiGHEXxci/mYl2zLQlqoceQkxieKTngbnq+Qbfxo77q0x7lfwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF8bOJXVdnp31rC34H8RJZTw1p1qMB8GA1UdIwQY MBaAFGJGvQDapNqSoMNvrN2c1pSR2WxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAt MGQ2MGQ2NDczMmJmLzEvWHhzNGxkVjJlbmZXc0xmZ2Z4RWxsUERXbldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAtMGQ2MGQ2NDczMmJm LzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw3JgMA8E AgACMAkDBwAgAQZ8KXQwDQYJKoZIhvcNAQELBQADggEBACe4Yya7JYQMI4ZG+/qf kg4AoKqbFGyO7CLkxDY6YYMYcRkJUEJxOH0k0fLDiaMWJnay+Ob2Thvn4eCOvl+Y 9PMUIVdzwY22vD6DKQB1zzB63FOgeOo3UrXKdakqQkB9cYWUXblnqKa1uEzztjDj DdLgg9a3djfAvmNUTFdhqU7rx5ydYkZ7pfx94ufpobJrUsUvyhy9vK8jBadDhJb/ 3EOoP+qiFro35VZ7JMH2P2qn1697IhcuAUwsy0Edk8GFPzE1Mr5uIsPUlcz0Gglu 5mzR9eCyNYurgyCNZlBmIBCv2k1CGczeH4aE8miI/lUmuRbRs96qtLQ0jx2nBUfd DrY= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:37 2026 by rpki-client